VDB
RHSA-2023%3A2061
RHSA-2023%3A2061
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in http-cache-semantics. When the server reads the cache policy from the request using this library, a Regular Expression Denial of Service occurs, caused by malicious request header values sent to the server.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | multicluster-engine/cluster-api-rhel8@sha256:48ca20110b38ef8490a0f8ebbbf49601b9f22f838cf86feb421a7e1c62cbe519_arm64 as a component of multicluster engine for Kubernetes 2.1 for RHEL 8 | *, multicluster-engine/cluster-api-rhel8@sha256:48ca20110b38ef8490a0f8ebbbf49601b9f22f838cf86feb421a7e1c62cbe519_arm64 |
| Red Hat | multicluster-engine/console-mce-rhel8@sha256:ec09019a1c21d9cfab45e8d4600edaf87d9269e3d36866970f4587a96ca05bdd_s390x as a component of multicluster engine for Kubernetes 2.1 for RHEL 8 | multicluster-engine/console-mce-rhel8@sha256:ec09019a1c21d9cfab45e8d4600edaf87d9269e3d36866970f4587a96ca05bdd_s390x, multicluster-engine/console-mce-rhel8@sha256:ec09019a1c21d9cfab45e8d4600edaf87d9269e3d36866970f4587a96ca05bdd_s390x |
| Red Hat | multicluster-engine/assisted-installer-reporter-rhel8@sha256:c8a6eb5dfa2756923ef7c9a0a3df327cd3dc0638befaa9aded4cb0e85062429a_ppc64le as a component of multicluster engine for Kubernetes 2.1 for RHEL 8 | multicluster-engine/assisted-installer-reporter-rhel8@sha256:c8a6eb5dfa2756923ef7c9a0a3df327cd3dc0638befaa9aded4cb0e85062429a_ppc64le, multicluster-engine/assisted-installer-reporter-rhel8@sha256:c8a6eb5dfa2756923ef7c9a0a3df327cd3dc0638befaa9aded4cb0e85062429a_ppc64le |
| Red Hat | multicluster-engine/assisted-installer-rhel8@sha256:34a06db52c6f91748add2807fd6710ed902c9575305eb7700131d19327456577_ppc64le as a component of multicluster engine for Kubernetes 2.1 for RHEL 8 | *, multicluster-engine/assisted-installer-rhel8@sha256:34a06db52c6f91748add2807fd6710ed902c9575305eb7700131d19327456577_ppc64le |
| Red Hat | multicluster-engine/must-gather-rhel8@sha256:378834c2332506289a7a6765b65cf8c634be02390eab9877b6178c38c3d6933e_amd64 as a component of multicluster engine for Kubernetes 2.1 for RHEL 8 | multicluster-engine/must-gather-rhel8@sha256:378834c2332506289a7a6765b65cf8c634be02390eab9877b6178c38c3d6933e_amd64, * |
| Red Hat | multicluster-engine/backplane-rhel8-operator@sha256:f5bec49f84f5558f3beb4faec617ddc294a59083dcca6babfa913e75f9941260_arm64 as a component of multicluster engine for Kubernetes 2.1 for RHEL 8 | *, multicluster-engine/backplane-rhel8-operator@sha256:f5bec49f84f5558f3beb4faec617ddc294a59083dcca6babfa913e75f9941260_arm64 |
| Red Hat | multicluster-engine/hive-rhel8@sha256:2b9b4efc871318f0ee4ad4ad637056adeda35430d205c72d0b314df907ff1fe1_arm64 as a component of multicluster engine for Kubernetes 2.1 for RHEL 8 | multicluster-engine/hive-rhel8@sha256:2b9b4efc871318f0ee4ad4ad637056adeda35430d205c72d0b314df907ff1fe1_arm64, multicluster-engine/hive-rhel8@sha256:2b9b4efc871318f0ee4ad4ad637056adeda35430d205c72d0b314df907ff1fe1_arm64 |
| Red Hat | multicluster-engine/discovery-rhel8@sha256:6d1ad1b253378bbdad11f81ae12b4c8147701c831c890716d342ad7c82acf5bf_s390x as a component of multicluster engine for Kubernetes 2.1 for RHEL 8 | multicluster-engine/discovery-rhel8@sha256:6d1ad1b253378bbdad11f81ae12b4c8147701c831c890716d342ad7c82acf5bf_s390x, multicluster-engine/discovery-rhel8@sha256:6d1ad1b253378bbdad11f81ae12b4c8147701c831c890716d342ad7c82acf5bf_s390x |
| Red Hat | multicluster-engine/cluster-api-rhel8@sha256:fad803aef8fc7d45584e7b6126a7e5808aa6dd61b90a7319a65c7184a6834b25_s390x as a component of multicluster engine for Kubernetes 2.1 for RHEL 8 | multicluster-engine/cluster-api-rhel8@sha256:fad803aef8fc7d45584e7b6126a7e5808aa6dd61b90a7319a65c7184a6834b25_s390x, * |
| Red Hat | multicluster-engine/cluster-api-provider-kubevirt-rhel8@sha256:1cfdee81cb70a7fcbde9ea5a973f61b598fc377f185541f27295078bef8b9cba_amd64 as a component of multicluster engine for Kubernetes 2.1 for RHEL 8 | multicluster-engine/cluster-api-provider-kubevirt-rhel8@sha256:1cfdee81cb70a7fcbde9ea5a973f61b598fc377f185541f27295078bef8b9cba_amd64, multicluster-engine/cluster-api-provider-kubevirt-rhel8@sha256:1cfdee81cb70a7fcbde9ea5a973f61b598fc377f185541f27295078bef8b9cba_amd64 |
| Red Hat | multicluster-engine/cluster-curator-controller-rhel8@sha256:28c82d80198790b8e88480d53f43c2707cbe1e7be4b3ea5c8a23c32042e0a855_arm64 as a component of multicluster engine for Kubernetes 2.1 for RHEL 8 | multicluster-engine/cluster-curator-controller-rhel8@sha256:28c82d80198790b8e88480d53f43c2707cbe1e7be4b3ea5c8a23c32042e0a855_arm64, multicluster-engine/cluster-curator-controller-rhel8@sha256:28c82d80198790b8e88480d53f43c2707cbe1e7be4b3ea5c8a23c32042e0a855_arm64 |
| Red Hat | multicluster-engine/assisted-installer-rhel8@sha256:ec709f18240d43620463402ef1dcab3882605873933826ee25d931aa0b1a3593_amd64 as a component of multicluster engine for Kubernetes 2.1 for RHEL 8 | *, multicluster-engine/assisted-installer-rhel8@sha256:ec709f18240d43620463402ef1dcab3882605873933826ee25d931aa0b1a3593_amd64 |
| Red Hat | multicluster-engine/cluster-proxy-addon-rhel8@sha256:0a5a3138d647669d595dbbcb833ed6746cc2a61320d04ea6cb39613ccde49351_arm64 as a component of multicluster engine for Kubernetes 2.1 for RHEL 8 | multicluster-engine/cluster-proxy-addon-rhel8@sha256:0a5a3138d647669d595dbbcb833ed6746cc2a61320d04ea6cb39613ccde49351_arm64, * |
| Red Hat | multicluster-engine/multicluster-engine-cluster-api-provider-agent-rhel8@sha256:e25343e6de00f9baed39eb9cbe87481b0e01ac071ae19e92a64e89f10ef69723_arm64 as a component of multicluster engine for Kubernetes 2.1 for RHEL 8 | multicluster-engine/multicluster-engine-cluster-api-provider-agent-rhel8@sha256:e25343e6de00f9baed39eb9cbe87481b0e01ac071ae19e92a64e89f10ef69723_arm64, * |
| Red Hat | multicluster-engine/cluster-proxy-rhel8@sha256:229b92fd2a1c44f74ecee5471a61d977b71724968225df4ba618b2f17be617c9_arm64 as a component of multicluster engine for Kubernetes 2.1 for RHEL 8 | multicluster-engine/cluster-proxy-rhel8@sha256:229b92fd2a1c44f74ecee5471a61d977b71724968225df4ba618b2f17be617c9_arm64, multicluster-engine/cluster-proxy-rhel8@sha256:229b92fd2a1c44f74ecee5471a61d977b71724968225df4ba618b2f17be617c9_arm64 |
| Red Hat | multicluster-engine/cluster-curator-controller-rhel8@sha256:3c34184051519647afacf2755cbd002c3243d044aac3c423f9a299daf7561162_amd64 as a component of multicluster engine for Kubernetes 2.1 for RHEL 8 | multicluster-engine/cluster-curator-controller-rhel8@sha256:3c34184051519647afacf2755cbd002c3243d044aac3c423f9a299daf7561162_amd64, multicluster-engine/cluster-curator-controller-rhel8@sha256:3c34184051519647afacf2755cbd002c3243d044aac3c423f9a299daf7561162_amd64 |
| Red Hat | multicluster-engine/assisted-installer-agent-rhel8@sha256:caae87a97173176e6a187ff83b89b0c4f1bc5a89765d522a66d393854d5b73b3_amd64 as a component of multicluster engine for Kubernetes 2.1 for RHEL 8 | multicluster-engine/assisted-installer-agent-rhel8@sha256:caae87a97173176e6a187ff83b89b0c4f1bc5a89765d522a66d393854d5b73b3_amd64, multicluster-engine/assisted-installer-agent-rhel8@sha256:caae87a97173176e6a187ff83b89b0c4f1bc5a89765d522a66d393854d5b73b3_amd64 |
| Red Hat | multicluster-engine/cluster-proxy-addon-rhel8@sha256:0f9ff378e2d5381dca80dbb4f64becdecc205bd9d4872ef425e4f072a43be4f7_ppc64le as a component of multicluster engine for Kubernetes 2.1 for RHEL 8 | multicluster-engine/cluster-proxy-addon-rhel8@sha256:0f9ff378e2d5381dca80dbb4f64becdecc205bd9d4872ef425e4f072a43be4f7_ppc64le, multicluster-engine/cluster-proxy-addon-rhel8@sha256:0f9ff378e2d5381dca80dbb4f64becdecc205bd9d4872ef425e4f072a43be4f7_ppc64le |
| Red Hat | multicluster-engine/multicluster-engine-hypershift-deployment-controller-rhel8@sha256:ce5d26dfc0d5115eef8ede026b4d91f44e976ce3287a5b72264630089b4e7bb7_ppc64le as a component of multicluster engine for Kubernetes 2.1 for RHEL 8 | multicluster-engine/multicluster-engine-hypershift-deployment-controller-rhel8@sha256:ce5d26dfc0d5115eef8ede026b4d91f44e976ce3287a5b72264630089b4e7bb7_ppc64le, multicluster-engine/multicluster-engine-hypershift-deployment-controller-rhel8@sha256:ce5d26dfc0d5115eef8ede026b4d91f44e976ce3287a5b72264630089b4e7bb7_ppc64le |
| Red Hat | multicluster-engine/cluster-api-provider-agent-rhel8@sha256:dd263a3a617758472cd1bd935913617c73c7ec1e174957756a3a1bb2905a135a_s390x as a component of multicluster engine for Kubernetes 2.1 for RHEL 8 | multicluster-engine/cluster-api-provider-agent-rhel8@sha256:dd263a3a617758472cd1bd935913617c73c7ec1e174957756a3a1bb2905a135a_s390x, * |
…and 132 more
Timeline
- May 1, 2023 CVE Published
- May 1, 2026 CVE Updated
- May 1, 2026 Distribution Patch
- May 1, 2026 Distribution Patch
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2023:2061 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://access.redhat.com/security/updates/classification#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2165824 issue
- https://issues.redhat.com/browse/ACM-3513 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2061.json advisory
- https://access.redhat.com/security/cve/CVE-2022-25881 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-25881 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-25881 advisory